Offensive Security Engineer
We are currently looking for an Offensive Security Engineer to join our growing team! Reporting directly to the Security Operations Center (SOC) Manager, you will assist with the formal development and execution of testing on computer systems. You will be responsible for helping assess the security of the systems within Brightspeed. In addition, the individual will assist the SOC analysts during incident triage and handling when needed (internal, customer-facing, Telcom, etc.). In this position, you will be part of a critical team on-call 24x7 to manage critical incidents. This position requires an individual that can handle multiple priorities and business risks.The Security Operations Center (SOC) Team is responsible for protecting the entire company. The team is augmented by an MSP (Managed Service Provider) vSOC (virtual SOC) team that will monitor all networks 24 x 7. The vSOC provides tier 1 monitoring and incident response. This SOC team will work directly with the vSOC and will provide next-level support in all aspects of security operations, including but not limited to incident response and threat hunting. In addition, the SOC team combines people, processes, and tools to continuously monitor and improve Brightspeed's security posture while detecting, analyzing, and responding to cyber security incidents.You will be required to have a strong background and understanding of all cyber security domains and works in the Protect, Detect, and Respond areas of the NIST CSF Framework. You will make vital cyber security decisions using a business risk analysis approach. Brightspeed is a cloud-first (Azure, GCP, and SaaS) company with a significant data center presence. This model will require you to consider security across a diverse portfolio of assets and networks. Brightspeed is also on a Zero Trust journey, which means the individual should be able to execute a multi-year program while ensuring network security and moving the organization along the maturity curve.We are looking for someone passionate about cyber security to work alongside a talented team to enable Brightspeed's best-in-class cyber security organization.All Enterprise Cyber Security organization team members also perform any other duties assigned.As Offensive Security Engineer, your duties and responsibilities will include:Conduct formal testing of Brightspeed computer systems, their software, and hardware security controlsThe ability to develop advanced, formal reports of campaigns for leadershipConduct security audits and legal cyberattack simulations by designing and utilizing hacking tools to access designated pieces of data during a predetermined time frameGenerate tools for breaking into security systemsDetect and correct system weaknessesProvide recommendations based on an assessmentImplement solutions to enhance data securityAssist in the development of detection and preventative controlsSupport the SOC as necessary during 24x7 on-callMentors and identifies training needs for newer Analysts and Engineers to improve the capabilities and maturity of the SOCCollaborates with other teams on security research and intelligence gatheringUse SIEM, SOAR, DLP tools, Cloud Posture Management, Endpoint Management, Endpoint Protection Systems (EDR/XDR), and other security tools to support a strong and healthy SOCParticipates in organizational projects, as requiredTicket ManagementCase ManagementDrive and monitor program metrics